@mneme-ai/mcp 1.17.6 → 1.18.0

package/dist/tools/_genome_marketplace.test.js

@@ -0,0 +1,157 @@
+/**
+ * Genome Marketplace — unit tests on a tmpdir repo.
+ */
+import { describe, expect, it, beforeEach, afterEach } from "vitest";
+import { mkdtempSync, rmSync, mkdirSync, writeFileSync, existsSync, readFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { packGenome, installGenome, verifyGenome, listInstalledGenomes, } from "./_genome_marketplace.js";
+describe("packGenome / verifyGenome", () => {
+    let repo;
+    beforeEach(() => {
+        repo = mkdtempSync(join(tmpdir(), "mneme-genome-"));
+        mkdirSync(join(repo, ".mneme"), { recursive: true });
+    });
+    afterEach(() => {
+        try {
+            rmSync(repo, { recursive: true, force: true });
+        }
+        catch { /* ignore */ }
+    });
+    it("returns empty files array when .mneme/ has no portable files", () => {
+        const g = packGenome(repo, "test", "1.0.0");
+        expect(g.files).toHaveLength(0);
+    });
+    it("includes portable files (constitution, packs/) in the genome", () => {
+        writeFileSync(join(repo, ".mneme", "constitution.json"), JSON.stringify({ rules: ["test"] }));
+        mkdirSync(join(repo, ".mneme", "packs"), { recursive: true });
+        writeFileSync(join(repo, ".mneme", "packs", "stripe.yml"), "name: stripe\n");
+        const g = packGenome(repo, "test", "1.0.0");
+        expect(g.files.some((f) => f.name === "constitution.json")).toBe(true);
+        expect(g.files.some((f) => f.name === "packs/stripe.yml")).toBe(true);
+    });
+    it("scrubs email addresses while preserving the domain", () => {
+        writeFileSync(join(repo, ".mneme", "tribal-knowledge.json"), JSON.stringify({ author: "alice@acme.com", note: "see bob@example.org for context" }));
+        const g = packGenome(repo, "test", "1.0.0");
+        const f = g.files.find((x) => x.name === "tribal-knowledge.json");
+        expect(f).toBeDefined();
+        expect(f.content).not.toContain("alice@acme.com");
+        expect(f.content).not.toContain("bob@example.org");
+        expect(f.content).toContain("<email>@acme.com");
+        expect(f.content).toContain("<email>@example.org");
+    });
+    it("does NOT include runtime state files (mneme.db, replay.jsonl, scoreboard)", () => {
+        writeFileSync(join(repo, ".mneme", "mneme.db"), "binary-blob");
+        writeFileSync(join(repo, ".mneme", "replay.jsonl"), `{"hash":"x"}\n`);
+        writeFileSync(join(repo, ".mneme", "confess-scoreboard.json"), "{}");
+        writeFileSync(join(repo, ".mneme", "constitution.json"), "{}");
+        const g = packGenome(repo, "test", "1.0.0");
+        expect(g.files.find((f) => f.name === "mneme.db")).toBeUndefined();
+        expect(g.files.find((f) => f.name === "replay.jsonl")).toBeUndefined();
+        expect(g.files.find((f) => f.name === "confess-scoreboard.json")).toBeUndefined();
+        expect(g.files.find((f) => f.name === "constitution.json")).toBeDefined();
+    });
+    it("contentHash is deterministic + verifiable", () => {
+        writeFileSync(join(repo, ".mneme", "constitution.json"), JSON.stringify({ a: 1 }));
+        const g1 = packGenome(repo, "test", "1.0.0");
+        const g2 = packGenome(repo, "test", "1.0.0");
+        expect(g1.contentHash).toBe(g2.contentHash);
+        expect(verifyGenome(g1).valid).toBe(true);
+    });
+    it("verifyGenome rejects tampered hash", () => {
+        writeFileSync(join(repo, ".mneme", "constitution.json"), "{}");
+        const g = packGenome(repo, "test", "1.0.0");
+        g.files.push({ name: "extra.txt", content: "added after pack" });
+        expect(verifyGenome(g).valid).toBe(false);
+    });
+});
+describe("installGenome", () => {
+    let src;
+    let dest;
+    beforeEach(() => {
+        src = mkdtempSync(join(tmpdir(), "mneme-genome-src-"));
+        dest = mkdtempSync(join(tmpdir(), "mneme-genome-dest-"));
+        mkdirSync(join(src, ".mneme"), { recursive: true });
+    });
+    afterEach(() => {
+        try {
+            rmSync(src, { recursive: true, force: true });
+        }
+        catch { /* ignore */ }
+        try {
+            rmSync(dest, { recursive: true, force: true });
+        }
+        catch { /* ignore */ }
+    });
+    it("installs all files from a verified genome", () => {
+        writeFileSync(join(src, ".mneme", "constitution.json"), JSON.stringify({ rules: [] }));
+        const g = packGenome(src, "test", "1.0.0");
+        const r = installGenome(dest, g);
+        expect(r.installed).toBe(1);
+        expect(r.skipped).toBe(0);
+        expect(existsSync(join(dest, ".mneme", "constitution.json"))).toBe(true);
+    });
+    it("reports conflicts when destination already has the file (no force)", () => {
+        writeFileSync(join(src, ".mneme", "constitution.json"), "newer");
+        const g = packGenome(src, "test", "1.0.0");
+        mkdirSync(join(dest, ".mneme"), { recursive: true });
+        writeFileSync(join(dest, ".mneme", "constitution.json"), "older");
+        const r = installGenome(dest, g);
+        expect(r.installed).toBe(0);
+        expect(r.skipped).toBe(1);
+        expect(r.conflicts).toContain("constitution.json");
+        expect(readFileSync(join(dest, ".mneme", "constitution.json"), "utf8")).toBe("older");
+    });
+    it("force=true overwrites existing files", () => {
+        writeFileSync(join(src, ".mneme", "constitution.json"), "newer");
+        const g = packGenome(src, "test", "1.0.0");
+        mkdirSync(join(dest, ".mneme"), { recursive: true });
+        writeFileSync(join(dest, ".mneme", "constitution.json"), "older");
+        const r = installGenome(dest, g, { force: true });
+        expect(r.installed).toBe(1);
+        expect(readFileSync(join(dest, ".mneme", "constitution.json"), "utf8")).toBe("newer");
+    });
+    it("rejects path-traversal attempts", () => {
+        const g = {
+            schemaVersion: 1,
+            id: "evil",
+            title: "evil",
+            description: "",
+            publishedAt: "",
+            publishedBy: "",
+            mnemeVersion: "1.0.0",
+            contentHash: "",
+            files: [{ name: "../../../etc/passwd", content: "pwned" }],
+        };
+        // Patch the hash to make it pass verify.
+        const properHash = require("node:crypto").createHash("sha256").update(JSON.stringify(g.files)).digest("hex");
+        g.contentHash = properHash;
+        const r = installGenome(dest, g);
+        expect(r.installed).toBe(0);
+        expect(r.conflicts.some((c) => c.includes("unsafe path"))).toBe(true);
+    });
+    it("throws when genome contentHash doesn't verify", () => {
+        const g = {
+            schemaVersion: 1,
+            id: "tampered",
+            title: "tampered",
+            description: "",
+            publishedAt: "",
+            publishedBy: "",
+            mnemeVersion: "1.0.0",
+            contentHash: "deadbeef",
+            files: [{ name: "constitution.json", content: "{}" }],
+        };
+        expect(() => installGenome(dest, g)).toThrow(/contentHash mismatch|hash/);
+    });
+    it("records the install in .mneme/genomes/{id}.installed.json", () => {
+        writeFileSync(join(src, ".mneme", "constitution.json"), "{}");
+        const g = packGenome(src, "myrepo", "1.0.0");
+        installGenome(dest, g);
+        const records = listInstalledGenomes(dest);
+        expect(records).toHaveLength(1);
+        expect(records[0].id).toBe(g.id);
+        expect(records[0].contentHash).toBe(g.contentHash);
+    });
+});
+//# sourceMappingURL=_genome_marketplace.test.js.map

package/dist/tools/_genome_marketplace.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_genome_marketplace.test.js","sourceRoot":"","sources":["../../src/tools/_genome_marketplace.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAClG,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,UAAU,EACV,aAAa,EACb,YAAY,EACZ,oBAAoB,GAErB,MAAM,0BAA0B,CAAC;AAElC,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,IAAI,IAAY,CAAC;IACjB,UAAU,CAAC,GAAG,EAAE;QACd,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;QACpD,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IACH,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC;YAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAC5C,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,mBAAmB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9F,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAC7E,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAC5C,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,aAAa,CACX,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,uBAAuB,CAAC,EAC7C,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,iCAAiC,EAAE,CAAC,CACtF,CAAC;QACF,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,uBAAuB,CAAC,CAAC;QAClE,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QACnD,MAAM,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QACpD,MAAM,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QACjD,MAAM,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,EAAE,aAAa,CAAC,CAAC;QAC/D,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,cAAc,CAAC,EAAE,gBAAgB,CAAC,CAAC;QACtE,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,yBAAyB,CAAC,EAAE,IAAI,CAAC,CAAC;QACrE,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,mBAAmB,CAAC,EAAE,IAAI,CAAC,CAAC;QAC/D,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAC5C,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACnE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACvE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,yBAAyB,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAClF,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,mBAAmB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACnF,MAAM,EAAE,GAAG,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAC7C,MAAM,EAAE,GAAG,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAC7C,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC;QAC5C,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,mBAAmB,CAAC,EAAE,IAAI,CAAC,CAAC;QAC/D,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACjE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,IAAI,GAAW,CAAC;IAChB,IAAI,IAAY,CAAC;IACjB,UAAU,CAAC,GAAG,EAAE;QACd,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;QACvD,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;QACzD,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IACH,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAC7E,IAAI,CAAC;YAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,mBAAmB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACvF,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,mBAAmB,CAAC,EAAE,OAAO,CAAC,CAAC;QACjE,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3C,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,mBAAmB,CAAC,EAAE,OAAO,CAAC,CAAC;QAClE,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QACnD,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,mBAAmB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,mBAAmB,CAAC,EAAE,OAAO,CAAC,CAAC;QACjE,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3C,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,mBAAmB,CAAC,EAAE,OAAO,CAAC,CAAC;QAClE,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,mBAAmB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,GAAW;YAChB,aAAa,EAAE,CAAC;YAChB,EAAE,EAAE,MAAM;YACV,KAAK,EAAE,MAAM;YACb,WAAW,EAAE,EAAE;YACf,WAAW,EAAE,EAAE;YACf,WAAW,EAAE,EAAE;YACf,YAAY,EAAE,OAAO;YACrB,WAAW,EAAE,EAAE;YACf,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;SAC3D,CAAC;QACF,yCAAyC;QACzC,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7G,CAAC,CAAC,WAAW,GAAG,UAAU,CAAC;QAC3B,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,GAAW;YAChB,aAAa,EAAE,CAAC;YAChB,EAAE,EAAE,UAAU;YACd,KAAK,EAAE,UAAU;YACjB,WAAW,EAAE,EAAE;YACf,WAAW,EAAE,EAAE;YACf,WAAW,EAAE,EAAE;YACf,YAAY,EAAE,OAAO;YACrB,WAAW,EAAE,UAAU;YACvB,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;SACtD,CAAC;QACF,MAAM,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,mBAAmB,CAAC,EAAE,IAAI,CAAC,CAAC;QAC9D,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC7C,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACvB,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAClC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tools/_mesh.d.ts

@@ -0,0 +1,51 @@
+/**
+ * MCP Mesh (v1.18.0 — black sheep #bonus)
+ *
+ * Multiple Mneme instances (across teams / repos) federate. Query goes
+ * out, each peer returns local results, the originator dedupes + ranks.
+ *
+ *   • mneme.mesh.peers           — list configured peers
+ *   • mneme.mesh.federate(query) — broadcast a query, aggregate responses
+ *
+ * v1.18.0 ships the SCAFFOLDING — config-driven peer registry plus a
+ * dispatcher that returns "no peers configured" when .mneme/mesh.json
+ * is absent. Real peer transport (HTTP / stdio bridge / WebSocket) lands
+ * in v1.19. The SHAPE of the API is locked now so AI agents can start
+ * coding against it.
+ *
+ * Privacy model:
+ *   • Federated queries carry NO source code or secrets — only metadata
+ *     (tool name, query string, optional fingerprint) goes over the wire.
+ *   • Each peer responds with its OWN data.* shape; aggregator merges
+ *     by relevance, never re-shapes.
+ *   • Peer auth is HMAC-shared-secret (configured per peer in mesh.json);
+ *     unsigned responses are dropped.
+ *
+ * Use cases:
+ *   • "Who in our company has touched code similar to this?" — cross-repo
+ *     expertise discovery without leaking source.
+ *   • "Has any sister repo seen this CVE before?" — security broadcast.
+ *   • "Onboard a new engineer: which other repos teach this concept?"
+ */
+import type { MnemeTool } from "./_types.js";
+interface MeshPeer {
+    /** Peer label — free text. */
+    name: string;
+    /** Reachable address — http(s) URL, file:// path to a stdio binary, etc. */
+    url: string;
+    /** Optional shared secret for HMAC-signed responses (not yet enforced). */
+    hmacSecret?: string;
+    /** Optional human-readable note about which repo this peer represents. */
+    note?: string;
+}
+interface MeshConfig {
+    schemaVersion: 1;
+    peers: MeshPeer[];
+}
+export declare function readMeshConfig(repoRoot: string): MeshConfig | null;
+export declare function writeMeshConfig(repoRoot: string, cfg: MeshConfig): void;
+export declare const meshPeersTool: MnemeTool;
+export declare const meshFederateTool: MnemeTool;
+export declare const meshTools: MnemeTool[];
+export {};
+//# sourceMappingURL=_mesh.d.ts.map

package/dist/tools/_mesh.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_mesh.d.ts","sourceRoot":"","sources":["../../src/tools/_mesh.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAIH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAI7C,UAAU,QAAQ;IAChB,8BAA8B;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,GAAG,EAAE,MAAM,CAAC;IACZ,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,UAAU,UAAU;IAClB,aAAa,EAAE,CAAC,CAAC;IACjB,KAAK,EAAE,QAAQ,EAAE,CAAC;CACnB;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAQlE;AAED,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,GAAG,IAAI,CAIvE;AAED,eAAO,MAAM,aAAa,EAAE,SAgD3B,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,SAqF9B,CAAC;AAEF,eAAO,MAAM,SAAS,EAAE,SAAS,EAAsC,CAAC"}

package/dist/tools/_mesh.js

@@ -0,0 +1,182 @@
+/**
+ * MCP Mesh (v1.18.0 — black sheep #bonus)
+ *
+ * Multiple Mneme instances (across teams / repos) federate. Query goes
+ * out, each peer returns local results, the originator dedupes + ranks.
+ *
+ *   • mneme.mesh.peers           — list configured peers
+ *   • mneme.mesh.federate(query) — broadcast a query, aggregate responses
+ *
+ * v1.18.0 ships the SCAFFOLDING — config-driven peer registry plus a
+ * dispatcher that returns "no peers configured" when .mneme/mesh.json
+ * is absent. Real peer transport (HTTP / stdio bridge / WebSocket) lands
+ * in v1.19. The SHAPE of the API is locked now so AI agents can start
+ * coding against it.
+ *
+ * Privacy model:
+ *   • Federated queries carry NO source code or secrets — only metadata
+ *     (tool name, query string, optional fingerprint) goes over the wire.
+ *   • Each peer responds with its OWN data.* shape; aggregator merges
+ *     by relevance, never re-shapes.
+ *   • Peer auth is HMAC-shared-secret (configured per peer in mesh.json);
+ *     unsigned responses are dropped.
+ *
+ * Use cases:
+ *   • "Who in our company has touched code similar to this?" — cross-repo
+ *     expertise discovery without leaking source.
+ *   • "Has any sister repo seen this CVE before?" — security broadcast.
+ *   • "Onboard a new engineer: which other repos teach this concept?"
+ */
+import { existsSync, readFileSync, writeFileSync, mkdirSync } from "node:fs";
+import { join } from "node:path";
+const MESH_FILE = ".mneme/mesh.json";
+export function readMeshConfig(repoRoot) {
+    const path = join(repoRoot, MESH_FILE);
+    if (!existsSync(path))
+        return null;
+    try {
+        return JSON.parse(readFileSync(path, "utf8"));
+    }
+    catch {
+        return null;
+    }
+}
+export function writeMeshConfig(repoRoot, cfg) {
+    const dir = join(repoRoot, ".mneme");
+    if (!existsSync(dir))
+        mkdirSync(dir, { recursive: true });
+    writeFileSync(join(repoRoot, MESH_FILE), JSON.stringify(cfg, null, 2), "utf8");
+}
+export const meshPeersTool = {
+    name: "mneme.mesh.peers",
+    category: "meta",
+    description: "List every peer Mneme instance configured for federation in " +
+        "`.mneme/mesh.json`. Use WHEN you want to know which other repos / teams " +
+        "this Mneme instance can broadcast queries to. Returns an empty list when " +
+        "mesh.json is absent — that means peer transport is not enabled in this repo.",
+    whenToUse: "You want to enumerate the federation peers configured for this repo.",
+    triggers: ["mesh peers", "mneme federation list", "federation status"],
+    inputSchema: { type: "object", properties: {} },
+    outputSchema: {
+        type: "object",
+        properties: {
+            configured: { type: "boolean" },
+            peers: { type: "array", items: { type: "object" } },
+        },
+    },
+    examples: [
+        {
+            userQuery: "What Mneme instances am I federated with?",
+            expectedOutput: "Returns { configured: true|false, peers: [{ name, url, note }] }. Empty when mesh.json is absent.",
+        },
+    ],
+    pitfalls: [
+        "Returns the configuration AS WRITTEN — does not check liveness. A peer URL may be unreachable.",
+        "v1.18.0 ships the API surface; actual peer transport lands in v1.19.",
+    ],
+    composeWith: ["mneme.mesh.federate"],
+    handler: async (rt) => {
+        const cfg = readMeshConfig(rt.meta.rootPath);
+        if (!cfg) {
+            return {
+                data: { configured: false, peers: [] },
+                wisdom: "No mesh.json — federation is not enabled in this repo. Create .mneme/mesh.json with a peers array to enable.",
+                confidence: { level: "high" },
+            };
+        }
+        return {
+            data: {
+                configured: true,
+                peers: cfg.peers.map((p) => ({ name: p.name, url: p.url, note: p.note })),
+            },
+            wisdom: `${cfg.peers.length} peer${cfg.peers.length === 1 ? "" : "s"} configured for federation.`,
+            confidence: { level: "high" },
+            followUp: cfg.peers.length > 0 ? ["mneme.mesh.federate"] : [],
+        };
+    },
+};
+export const meshFederateTool = {
+    name: "mneme.mesh.federate",
+    category: "meta",
+    description: "Broadcast a query to every configured Mneme peer + aggregate the responses. " +
+        "Privacy: the query string + tool-name go over the wire; source code does NOT. " +
+        "Each peer's data.* response is preserved (no re-shaping); aggregator merges " +
+        "by relevance score. Use WHEN you want cross-repo expertise discovery, " +
+        "security broadcasts (\"has any sister repo seen this CVE?\"), or onboarding " +
+        "rehearsals across multiple codebases. v1.18.0: SCAFFOLDING ONLY — returns " +
+        "'no peer transport' until v1.19 ships the actual HTTP / stdio bridge.",
+    whenToUse: "You want to broadcast a tool query to every configured Mneme peer + aggregate responses.",
+    triggers: ["federate this query", "ask all peers", "cross-repo search"],
+    inputSchema: {
+        type: "object",
+        properties: {
+            tool: { type: "string", description: "Tool name to broadcast (e.g. 'mneme.memory.ask')." },
+            args: { description: "Arguments forwarded to each peer's tool call." },
+        },
+        required: ["tool", "args"],
+    },
+    outputSchema: {
+        type: "object",
+        properties: {
+            total: { type: "number", description: "Peers contacted." },
+            responses: { type: "array", items: { type: "object" } },
+            aggregated: { type: "object" },
+            transportReady: { type: "boolean", description: "false in v1.18.0 — true once v1.19 ships transport." },
+        },
+    },
+    examples: [
+        {
+            userQuery: "Ask every peer Mneme: 'has anyone seen a CVE matching this commit?'",
+            args: { tool: "mneme.memory.ask", args: { question: "any commits referencing CVE-2024-XXXXX?" } },
+            expectedOutput: "v1.18.0: returns transportReady=false + scaffolding response. v1.19+: per-peer responses + aggregated answer.",
+        },
+    ],
+    pitfalls: [
+        "v1.18.0 — peer transport NOT YET WIRED. Returns scaffolding response so AI agents can code against the API surface.",
+        "Once transport ships (v1.19): peers are unauthenticated unless mesh.json provides an hmacSecret per peer. Unsigned responses get dropped.",
+        "Federated queries are slower than local — 1× round-trip per peer. Use sparingly.",
+    ],
+    composeWith: ["mneme.mesh.peers", "mneme.help"],
+    handler: async (rt, args) => {
+        const cfg = readMeshConfig(rt.meta.rootPath);
+        const tool = String(args["tool"] ?? "");
+        if (!tool) {
+            return {
+                data: { error: "missing required argument: tool" },
+                wisdom: "Pass the tool name to federate (e.g. 'mneme.memory.ask').",
+                confidence: { level: "high" },
+            };
+        }
+        if (!cfg || cfg.peers.length === 0) {
+            return {
+                data: {
+                    total: 0,
+                    responses: [],
+                    aggregated: { note: "no peers configured" },
+                    transportReady: false,
+                },
+                wisdom: "No peers configured. Create .mneme/mesh.json with peer entries to enable federation. v1.18.0 ships the API surface; actual transport lands in v1.19.",
+                confidence: { level: "high" },
+            };
+        }
+        // v1.18.0 scaffolding: return per-peer 'not yet implemented' shape.
+        const responses = cfg.peers.map((p) => ({
+            peer: p.name,
+            url: p.url,
+            status: "transport-pending",
+            detail: "v1.18.0 scaffolding — actual peer transport ships in v1.19.",
+        }));
+        return {
+            data: {
+                total: cfg.peers.length,
+                responses,
+                aggregated: { note: "scaffolding response — transport not yet wired" },
+                transportReady: false,
+            },
+            wisdom: `Scaffolding response: ${cfg.peers.length} peer${cfg.peers.length === 1 ? "" : "s"} would be contacted, but v1.18.0 ships only the API. Transport in v1.19.`,
+            confidence: { level: "low", notes: "Scaffolding only — real responses arrive in v1.19." },
+        };
+    },
+};
+export const meshTools = [meshPeersTool, meshFederateTool];
+//# sourceMappingURL=_mesh.js.map

package/dist/tools/_mesh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_mesh.js","sourceRoot":"","sources":["../../src/tools/_mesh.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,MAAM,SAAS,GAAG,kBAAkB,CAAC;AAkBrC,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAe,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,GAAe;IAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACrC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAc;IACtC,IAAI,EAAE,kBAAkB;IACxB,QAAQ,EAAE,MAAM;IAChB,WAAW,EACT,8DAA8D;QAC9D,0EAA0E;QAC1E,2EAA2E;QAC3E,8EAA8E;IAChF,SAAS,EAAE,sEAAsE;IACjF,QAAQ,EAAE,CAAC,YAAY,EAAE,uBAAuB,EAAE,mBAAmB,CAAC;IACtE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;IAC/C,YAAY,EAAE;QACZ,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YAC/B,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;SACpD;KACF;IACD,QAAQ,EAAE;QACR;YACE,SAAS,EAAE,2CAA2C;YACtD,cAAc,EAAE,mGAAmG;SACpH;KACF;IACD,QAAQ,EAAE;QACR,gGAAgG;QAChG,sEAAsE;KACvE;IACD,WAAW,EAAE,CAAC,qBAAqB,CAAC;IACpC,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QACpB,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO;gBACL,IAAI,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE;gBACtC,MAAM,EAAE,8GAA8G;gBACtH,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE;aAC9B,CAAC;QACJ,CAAC;QACD,OAAO;YACL,IAAI,EAAE;gBACJ,UAAU,EAAE,IAAI;gBAChB,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;aAC1E;YACD,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,6BAA6B;YACjG,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE;YAC7B,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,EAAE;SAC9D,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAc;IACzC,IAAI,EAAE,qBAAqB;IAC3B,QAAQ,EAAE,MAAM;IAChB,WAAW,EACT,8EAA8E;QAC9E,gFAAgF;QAChF,8EAA8E;QAC9E,wEAAwE;QACxE,8EAA8E;QAC9E,4EAA4E;QAC5E,uEAAuE;IACzE,SAAS,EACP,0FAA0F;IAC5F,QAAQ,EAAE,CAAC,qBAAqB,EAAE,eAAe,EAAE,mBAAmB,CAAC;IACvE,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mDAAmD,EAAE;YAC1F,IAAI,EAAE,EAAE,WAAW,EAAE,+CAA+C,EAAE;SACvE;QACD,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;KAC3B;IACD,YAAY,EAAE;QACZ,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE;YAC1D,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;YACvD,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC9B,cAAc,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,qDAAqD,EAAE;SACxG;KACF;IACD,QAAQ,EAAE;QACR;YACE,SAAS,EAAE,qEAAqE;YAChF,IAAI,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,yCAAyC,EAAE,EAAE;YACjG,cAAc,EAAE,+GAA+G;SAChI;KACF;IACD,QAAQ,EAAE;QACR,qHAAqH;QACrH,2IAA2I;QAC3I,kFAAkF;KACnF;IACD,WAAW,EAAE,CAAC,kBAAkB,EAAE,YAAY,CAAC;IAC/C,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE;QAC1B,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO;gBACL,IAAI,EAAE,EAAE,KAAK,EAAE,iCAAiC,EAAE;gBAClD,MAAM,EAAE,2DAA2D;gBACnE,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE;aAC9B,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,OAAO;gBACL,IAAI,EAAE;oBACJ,KAAK,EAAE,CAAC;oBACR,SAAS,EAAE,EAAE;oBACb,UAAU,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE;oBAC3C,cAAc,EAAE,KAAK;iBACtB;gBACD,MAAM,EACJ,sJAAsJ;gBACxJ,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE;aAC9B,CAAC;QACJ,CAAC;QACD,oEAAoE;QACpE,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtC,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,MAAM,EAAE,mBAA4B;YACpC,MAAM,EAAE,6DAA6D;SACtE,CAAC,CAAC,CAAC;QACJ,OAAO;YACL,IAAI,EAAE;gBACJ,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM;gBACvB,SAAS;gBACT,UAAU,EAAE,EAAE,IAAI,EAAE,gDAAgD,EAAE;gBACtE,cAAc,EAAE,KAAK;aACtB;YACD,MAAM,EAAE,yBAAyB,GAAG,CAAC,KAAK,CAAC,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,0EAA0E;YACpK,UAAU,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,oDAAoD,EAAE;SAC1F,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,SAAS,GAAgB,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC"}

package/dist/tools/_registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"_registry.d.ts","sourceRoot":"","sources":["../../src/tools/_registry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAoB3D;sEACsE;AACtE,wBAAgB,aAAa,IAAI,SAAS,EAAE,CAoB3C;AAED,mDAAmD;AACnD,wBAAgB,YAAY,IAAI,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CASrD;AAED,uEAAuE;AACvE,wBAAgB,eAAe,IAAI,GAAG,CAAC,YAAY,EAAE,SAAS,EAAE,CAAC,CAOhE"}
+{"version":3,"file":"_registry.d.ts","sourceRoot":"","sources":["../../src/tools/_registry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AA4B3D;sEACsE;AACtE,wBAAgB,aAAa,IAAI,SAAS,EAAE,CA6B3C;AAED,mDAAmD;AACnD,wBAAgB,YAAY,IAAI,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CASrD;AAED,uEAAuE;AACvE,wBAAgB,eAAe,IAAI,GAAG,CAAC,YAAY,EAAE,SAAS,EAAE,CAAC,CAOhE"}

package/dist/tools/_registry.js

@@ -22,6 +22,14 @@ import { constitutionTool } from "./_constitution_tool.js";
 import { verifyClaimsTool } from "./_verify_claims_tool.js";
 import { dnaSearchTool } from "./_dna_tool.js";
 import { genomeTools } from "./_genome_tools.js";
+import { toolMetaTools } from "./_tool_meta.js";
+import { adversaryTool } from "./_court.js";
+import { confessTool } from "./_confess.js";
+import { replayTools } from "./_replay.js";
+import { timeTravelTools } from "./_timetravel.js";
+import { genomeMarketplaceTools } from "./_genome_marketplace.js";
+import { aletheiaTools, honeypotTools } from "./_aletheia.js";
+import { meshTools } from "./_mesh.js";
 /** All Mneme tools, in display order. The capabilities syllabus comes first
  *  so AI clients that read tool lists top-down see it immediately. */
 export function buildAllTools() {
@@ -33,6 +41,15 @@ export function buildAllTools() {
         constitutionTool,
         dnaSearchTool,
         ...genomeTools,
+        ...toolMetaTools,
+        adversaryTool,
+        confessTool,
+        ...replayTools,
+        ...timeTravelTools,
+        ...genomeMarketplaceTools,
+        ...aletheiaTools,
+        ...honeypotTools,
+        ...meshTools,
         smartDoTool,
         ...memoryTools,
         ...peopleTools,

package/dist/tools/_registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"_registry.js","sourceRoot":"","sources":["../../src/tools/_registry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD;sEACsE;AACtE,MAAM,UAAU,aAAa;IAC3B,OAAO;QACL,gBAAgB;QAChB,oBAAoB;QACpB,UAAU;QACV,gBAAgB;QAChB,gBAAgB;QAChB,aAAa;QACb,GAAG,WAAW;QACd,WAAW;QACX,GAAG,WAAW;QACd,GAAG,WAAW;QACd,GAAG,UAAU;QACb,GAAG,cAAc;QACjB,GAAG,aAAa;QAChB,GAAG,YAAY;QACf,GAAG,UAAU;QACb,GAAG,QAAQ;QACX,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,YAAY;IAC1B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAqB,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,EAAE,CAAC;QAChC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,eAAe;IAC7B,MAAM,GAAG,GAAG,IAAI,GAAG,EAA6B,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,EAAE,CAAC;QAChC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAClD,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"_registry.js","sourceRoot":"","sources":["../../src/tools/_registry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC;sEACsE;AACtE,MAAM,UAAU,aAAa;IAC3B,OAAO;QACL,gBAAgB;QAChB,oBAAoB;QACpB,UAAU;QACV,gBAAgB;QAChB,gBAAgB;QAChB,aAAa;QACb,GAAG,WAAW;QACd,GAAG,aAAa;QAChB,aAAa;QACb,WAAW;QACX,GAAG,WAAW;QACd,GAAG,eAAe;QAClB,GAAG,sBAAsB;QACzB,GAAG,aAAa;QAChB,GAAG,aAAa;QAChB,GAAG,SAAS;QACZ,WAAW;QACX,GAAG,WAAW;QACd,GAAG,WAAW;QACd,GAAG,UAAU;QACb,GAAG,cAAc;QACjB,GAAG,aAAa;QAChB,GAAG,YAAY;QACf,GAAG,UAAU;QACb,GAAG,QAAQ;QACX,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,YAAY;IAC1B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAqB,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,EAAE,CAAC;QAChC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,eAAe;IAC7B,MAAM,GAAG,GAAG,IAAI,GAAG,EAA6B,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,EAAE,CAAC;QAChC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAClD,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/tools/_replay.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Replay Traces (v1.18.0 — black sheep #7)
+ *
+ * Every MCP tool call is recorded as one HMAC-chained line in
+ * `.mneme/replay.jsonl`. Each entry's `prevHash` references the previous
+ * line, so any tampering breaks the chain at exactly one point — Merkle
+ * trail without a tree.
+ *
+ *   • mneme.replay.dump       — return the whole session trace as JSON
+ *   • mneme.replay.fingerprint — return the Merkle root + chain integrity
+ *
+ * Use cases: SOC2 / EU AI Act audit evidence, deterministic-session proofs,
+ * post-mortem reconstruction. The fingerprint is what you publish; the
+ * dump is what you'd hand an auditor.
+ *
+ * The recorder lives in this file but is invoked from index.ts on every
+ * call. Recording is best-effort — any I/O error is swallowed so a
+ * corrupted disk can never block tool dispatch.
+ */
+import type { MnemeTool } from "./_types.js";
+interface ReplayEntry {
+    /** ISO-8601 timestamp. */
+    ts: string;
+    /** Tool name invoked. */
+    tool: string;
+    /** SHA-256 of the JSON-stringified arguments (full args may contain user data). */
+    argHash: string;
+    /** SHA-256 of the JSON-stringified response (full response may be huge). */
+    responseHash: string;
+    /** Verdict if the tool returned one (PASS/WARN/FAIL/etc.) — convenience field. */
+    verdict?: string;
+    /** Hash of the previous line + this line's payload — chain link. */
+    prevHash: string;
+    /** This entry's hash (HMAC of payload). Becomes prevHash for the next entry. */
+    hash: string;
+}
+/** Append a single tool-call record. Best-effort — never throws. */
+export declare function recordReplay(repoRoot: string, tool: string, args: unknown, response: unknown): void;
+export interface ReplayChainStatus {
+    total: number;
+    intact: boolean;
+    brokenAt?: number;
+    /** Merkle root = HMAC(secret, lastHash). Stable identifier for the trace. */
+    root: string;
+}
+export declare function verifyChain(repoRoot: string): ReplayChainStatus;
+export declare function readReplay(repoRoot: string, limit?: number): ReplayEntry[];
+export declare const replayDumpTool: MnemeTool;
+export declare const replayFingerprintTool: MnemeTool;
+export declare const replayTools: MnemeTool[];
+export {};
+//# sourceMappingURL=_replay.d.ts.map

package/dist/tools/_replay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_replay.d.ts","sourceRoot":"","sources":["../../src/tools/_replay.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAKH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAM7C,UAAU,WAAW;IACnB,0BAA0B;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,yBAAyB;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,mFAAmF;IACnF,OAAO,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,YAAY,EAAE,MAAM,CAAC;IACrB,kFAAkF;IAClF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oEAAoE;IACpE,QAAQ,EAAE,MAAM,CAAC;IACjB,gFAAgF;IAChF,IAAI,EAAE,MAAM,CAAC;CACd;AAyCD,oEAAoE;AACpE,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,OAAO,EACb,QAAQ,EAAE,OAAO,GAChB,IAAI,CAgBN;AAYD,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6EAA6E;IAC7E,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,iBAAiB,CA8B/D;AAED,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,SAAO,GAAG,WAAW,EAAE,CAgBxE;AAED,eAAO,MAAM,cAAc,EAAE,SA4D5B,CAAC;AAEF,eAAO,MAAM,qBAAqB,EAAE,SA+CnC,CAAC;AAEF,eAAO,MAAM,WAAW,EAAE,SAAS,EAA4C,CAAC"}